Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
CVE-2026-19743
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-19743
Full Client
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Host
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "TeamViewer",
"product": "Full Client",
"versions": [
{
"status": "affected",
"version": "15.0",
"lessThan": "15.82",
"versionType": "custom"
},
{
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 & 8)",
"lessThan": "15.64.8 (Legacy Windows 7 & 8)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (Windows)",
"lessThan": "14.7.48855 (Windows)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (Windows)",
"lessThan": "13.2.36230 (Windows)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (Linux)",
"lessThan": "14.7.48855 (Linux)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (Linux)",
"lessThan": "13.2.153995 (Linux)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (MacOS)",
"lessThan": "14.7.48855 (MacOS)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (MacOS)",
"lessThan": "13.2.153994 (MacOS)",
"versionType": "custom"
}
],
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"defaultStatus": "unaffected"
},
{
"vendor": "TeamViewer",
"product": "Host",
"versions": [
{
"status": "affected",
"version": "15.0",
"lessThan": "15.82",
"versionType": "custom"
},
{
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 & 8)",
"lessThan": "15.64.8 (Legacy Windows 7 & 8)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (Windows)",
"lessThan": "14.7.48855 (Windows)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (Windows)",
"lessThan": "13.2.36230 (Windows)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (Linux)",
"lessThan": "14.7.48855 (Linux)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (Linux)",
"lessThan": "13.2.153995 (Linux)",
"versionType": "custom"
},
{
"status": "affected",
"version": "14.7.0 (MacOS)",
"lessThan": "14.7.48855 (MacOS)",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.2.0 (MacOS)",
"lessThan": "13.2.153994 (MacOS)",
"versionType": "custom"
}
],
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-19743
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #4504 · Revision 1
- Added to Heist Feed
- Publisher date